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Top Stories 

• A school bus from the Larimore Public School District in Fargo, North Dakota, collided 
with an oncoming train at a railroad crossing January 5, killing the bus driver and 1 student 
and injuring 12 others. - Associated Press (See item 8) 

• A winter storm moved across the country January 5 - January 6 affecting transportation 
nationally and causing road and flight delays in several States while a landslide in 
Aberdeen-Hoquiam, Washington, isolated 200 people and the city of Snoqualmie, 
Washington, ordered flood evacuations due to rain. - Weather.com (See item 9 ) 

• More than 650,000 gallons of raw sewage spilled into Spring Creek in Collin County, 
Texas, after a lift station’s power supply was struck by lightning January 3. - KTVT 11 
Fort Worth (See item 15 ) 

• A two-story annex of a Best Western motel in Ludlow, Vermont, suffered $500,000 in 
losses and severe structural damage after an explosion in an oil-fired water heater January 
6. - Associated Press (See item 30 ) 
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Energy Sector 



1. January 6, Pittsburgh Tribune -Review - (West Virginia) Methane fire extinguished at 
West Virginia power plant. An evacuation order for 10 homes was lifted 2 hours after 
a fire ignited January 5 among storage tanks at a coal-fired Longview Power plant near 
Morgantown. The fire burned itself out and was contained to the transferring equipment 
without disrupting operations. 

Source: http://triblive.com/news/adminpage/7502618-74/wolfe-plant-power 

2. January 5, Pennsylvania Department of Environmental Protection - (Pennsylvania) 

DEP fines Leighow Oil Co. Inc. more than $63,000 for violations at two facilities in 
Montour County. The Pennsylvania Department of Environmental Protection 
announced January 5 that it issued a fine of $63,35 1 against Leighow Oil Co. Inc., for 
Clean Streams Law and storage tank violations at 2 of its facilities in Mahoning and 
Valley townships after causing environmental degradation to 2 creeks and wetland 
which could have been prevented with proper maintenance and monitoring. 

Source: 

http://www.portal.state.pa.us/portal/server.pt/communitv/newsroom/14287?id=20669& 

typeid=l 

Lor another story, see item 14 
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Chemical Industry Sector 

Nothing to report 
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Nuclear Reactors, Materials, and Waste Sector 

Nothing to report 
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Critical Manufacturing Sector 

3. January 5, U.S. Department of Labor - (Pennsylvania) ‘Severe violator’ Domestic 
Casting endangers workers by ignoring prior OSHA violations at iron foundry. 
The Occupational Safety and Health Administration (OSHA) cited Domestic Casting 
for 27 violations at its Shippensburg iron foundry, including 2 willful and 12 repeat 
violations, for exposing workers to machine guarding, fall, sling, and other hazards. 
Proposed fines totaled $152,912 and the facility remains in OSHA’s Severe Violator 
Enforcement Program. 

Source: 

https://www.osha.gov/pls/oshaweb/owadisp.show document?p table=NEWS RELEA 
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4. January 5, U.S. Department of Labor - (Alabama) OSHA cites auto parts supplier 
for exposing workers to amputation, electrical and struck-by hazards. Auto parts 
supplier Saehaesung Alabama Inc., was cited by the Occupational Safety and Health 
Administration for a total of 10 safety violations at the company’s Andalusia and 
LaFayette facilities in Alabama for exposing workers to amputation, electrical, and 
struck-by hazards. Proposed fines totaled $102,000. 

Source: 

https://www.osha.gov/pls/oshaweb/owadisp.show document?p table=NEWS RELEA 
SES&p id=27195 

5. January 4, WBTV 3 Charlotte - (North Carolina) Four-alarm fire engulfs Rowan Co. 
factory, 1 injury reported. Firefighters responded to a 4-alarm fire at the Mid State 
Manufacturing metal components facility in Rowan County January 4 that spread 
through the roof of the building. One firefighter was taken to a hospital for suffering 
from smoke inhalation while responding to the fire. 

Source: http://www.wbtv.com/story/27756916/four-alarm-fire-engulfs-rowan-co- 
factory 
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Defense Industrial Base Sector 

Nothing to report 
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Financial Services Sector 

6. January 6, Softpedia - (International) Over $5 million stolen from Bitstamp’s 
Bitcoin wallets. Bitstamp stated January 6 that some of its wallet accounts for the 
Bitcoin virtual currency were compromised January 4, resulting in a loss of around $5 
million in Bitcoins. The company suspended its services January 5 to investigate the 
compromise and stated that law enforcement agencies are involved in the inquiry. 
Source: http://news.softpedia.com/news/Over-5-Million-Stolen-From-Bitstamp-s- 
Bitcoin-Wallets-469Q69.shtml 

1 Return to top i 

Transportation Systems Sector 

7. January 6, WKBW 7 Buffalo - (New York) Cargo plane forced to make emergency 
landing. A FedEx cargo plane made an emergency landing at Buffalo-Niagara 
International Airport January 5 due to issues with one of its landing gears. The flight 
landed safely and none of the three crew members were hurt. 

Source: http://www.wkbw.com/news/cargo-plane-forced-to-make-emergencv-landing 
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8. January 6, Associated Press - (North Dakota) 2 dead, a dozen injured in North 
Dakota train-bus crash. A school bus from the Larimore Public School District in 
Fargo collided with an oncoming train at a railroad crossing January 5, killing the bus 
driver and 1 student and injuring 12 others. The train was not carrying cargo at the time 
and two crew members on board were not injured. 

Source: http://www.msn.com/en-us/news/us/2-dead-a-dozen-iniured-in-north-dakota- 
train-bus-crash/ar-BBhyEAe?ocid=iehp 

9. January 6, Weather.com - (National) Winter Storm Gorgon state-by-state update: 
one dead in Nebraska; multi-vehicle pileups in Midwest; traffic snarled in 
Northeast. Winter Storm Gorgon moved from the West Coast January 5 to the East 
Coast January 6 affecting transportation nationally and causing road and flight delays 
in several Midwestern and Northeastern States. Additionally a landslide in Aberdeen - 
Hoquiam, Washington, isolated 200 people and closed Highways 12, 101, and 107 for 
cleanup and the city of Snoqualmie, Washington, ordered flood evacuations January 5 
due to rain from the storm. 

Source: http://www.weather.com/safetv/winter/news/winter-storm-gorgon-latest-news 

10. January 6, Kennebec Journal - (Maine) One lane reopens on 1-95 in Augusta. A 
semi-truck accident caused by icy conditions spilled 120 gallons of diesel fuel onto 
Interstate 95 in Augusta, Maine, and damaged a bridge guardrail, prompting an 
overnight highway closure January 5. Only one lane opened January 6 and the Maine 
Department of Environmental Protection Officials shut down a water well located near 
the accident as a precaution. 

Source: http://www.pressherald.com/2015/01/06/i-95-reopens-after-sunday-crash/ 

1 1 . January 5, KCCI 8 Des Moines - (Iowa) 20-vehicle plus crash closes Interstate 80 
westbound. Westbound lanes of Interstate 80 near Altoona, Iowa, were closed for 
several hours January 5 due to a crash that involved more than 20 vehicles. 

Ambulances were called onto the scene to respond to injuries. 

Source: http://www.kcci.com/weather/20vehicle-crash-reported-on-interstate- 
80/30540954 
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Food and Agriculture Sector 

12. January 6, U.S. Food and Drug Administration - (National) Eillien's Candies Inc. 
voluntarily recalls various sizes and brands of Walnut Pieces because of possible 
health risk. Eillien’s Candies Inc., announced January 5 a recall for various sizes and 
brands of its Walnut Pieces after a routine sample by the U.S. Food and Drug 
Administration in the retail marketplace revealed that a package of the product 
contained Salmonella. The recalled products were distributed to various stores in 
several States. 

Source: http://www.fda.gov/Safety/Recalls/ucm429094.htm 
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Water and Wastewater Systems Sector 



13. January 5, WDAF 4 Kansas City - (Missouri) Boil advisory issued for Buckner, 
Sibley and Levasy, Mo. The City of Buckner announced a water boil advisory January 
5 through January 7 that includes the city as well as Levasy and Sibley. 

Source: http://fox4kc.com/2015/01/05/boil-advisory-issued-for-buckner-sibley-and- 
levasy-mo/ 

14. January 5, KTIV 4 Sioux City - (Iowa) Water main break causes street collapse in 
Sioux City. A water main break in Sioux City January 5 caused a street to collapse and 
resulted in a gas main break leaving several homes without heat. MidAmerican Energy 
shut down the broken gas line and city officials stated that extremely cold weather was 
the cause of the water main break. 

Source: http://www.ktiv.com/story/27762898/2015/01/05/water-main-break-causes- 
street-collapse-in-sioux-city 

15. January 5, KTVT 11 Fort Worth - (Texas) Concerns after 650,000+ gallons of raw 
sewage flows into creek. More than 650,000 gallons of raw sewage spilled into Spring 
Creek in Collin County after a lift station’s power supply was struck by lightning 
January 3. North Texas Municipal Water District officials stated that lab test results 
have not identified any potential environmental health concerns. 

Source: http://dfw.cbslocal.com/2015/01/05/concems-after-650000-gallons-of-raw- 
sewage-flows-into-creek/ 

For additional stories, see items 2 and 10 
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Healthcare and Public Health Sector 

16. January 6, KAAL 6 Austin - (Minnesota) Stolen patient information prompts data 
breach warning from Shoreview company. Personal and health information for an 
unknown number of patients at DJO Global, an orthopedic medical device company in 
Shoreview, was stolen after a thief took a laptop containing the information in 
November 2014 from the vehicle of a contractor working for the company. 

Source: http://www.kaaltv.com/article/stories/S3667320.shtml 

17. January 6, Twin Falls Times-News - (Idaho) Power outage knocks out hospital 
access to patient records, phones. Service was restored January 5 after the phone 
system and access to medical records and the time card system at St. Luke’s Magic 
Valley Medical Center in Twin Falls went down after the server room lost power 
January 4. The hospital worked to treat patients through backup means and service was 
uninterrupted. 

Source: http://magicvallev.com/news/local/power-outage-knocks-out-hospital-access- 
to-patient-records-phones/article e4d3fc46- 1 5f 1 -5ae6-aa5b- 1 8b4497 1 546a.html 
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Government Facilities Sector 



18. January 6, WGN 9 Chicago - (Illinois) 2 Chicago schools battle heat problems; 1 
school closed today for maintenance. Crews worked to resolve heat problems at 
Howe School of Excellence while classes at Intrinsic Charter School in Chicago were 
cancelled January 6 after 1 of 3 heating units malfunctioned in the school building 
January 5. 

Source: http://wgntv.corn/2015/01/05/with-bitter-temps-and-broken-heat-chicago- 
school-has-unpleasant-retum-from- winter-break/ 

19. January 6, WRC 4 Washington, D.C. - (Virginia; Maryland; Washington, D.C.) School 
systems say sorry for staying open in snow. A number of school districts in 
Maryland, Virginia, and Washington, D.C., cancelled classes or announced 2 hour 
delays January 6 due to snowfall produced by a winter storm that caused slippery road 
conditions. 

Source: http://www.nbcwashington.com/weather/stories/Snow-Expected-in-DC-Area- 
Tuesday-Moming-287499001.html 

20. January 5, KNBC 4 Los Angeles - (California) Beverly Hills High School closed after 
bomb threat investigation. School administrators cancelled classes at Beverly Hills 
High School in California January 5 after the school was evacuated due to a phoned 
bomb threat. Police searched the campus and deemed it safe once nothing suspicious 
was found. 

Source: http://www.nbclosangeles.com/news/local/Beveiiv-Hills-High-School-Bomb- 
Threat-Lockdown-Evacuation-287547941.html 

21. January 5, KNSD 39 San Diego - (California) Carlsbad High School closed after 
threat. A threat posted on social media to shoot up Carlsbad High School in California 
prompted officials to cancel classes January 6 after the school went on lock down 
January 5. Carlsbad Village Academy, which is housed on the same campus, also 
cancelled classes while police investigated the threat. 

Source: http://www.nbcsandiego.com/news/local/Possible-Threat-at-Caiisbad-High- 
School— 287535281.html 

22. January 5, WLUK 11 Green Bay - (Wisconsin) Wind chills cause school delays, 
closings. School districts in northeast Wisconsin closed dozens of schools and delayed 
the start times of others January 5 due to frigid temperatures and wind chills produced 
by a winter storm January 4. 

Source: http://fox 1 1 online.com/20 1 5/0 1/05/wind-chills-cause-school-delays-closings/ 
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Emergency Services Sector 

23. January 5, Lower Hudson Valley Journal News - (New York) Yonkers fixes 911 call 
disruption. Emergency 9-1-1 and police calls in Yonkers resumed over the weekend of 
January 3 after a service disruption December 30 caused by a combination of electrical 
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and telephone wire issues. 

Source: http://www.lohud.com/storv/news/local/2015/01/Q5/yonkers- 
disruption/21285385/ 

24. January 5, WSB 2 Atlanta - (Georgia) Gwinnett Co. 911 Center evacuated due to 
hazmat situation. Five employees at the Gwinnett County 9-1-1 Center in Georgia 
were taken to an area hospital for evaluation after the center was evacuated due to a 
HAZMAT situation January 5 that caused the fire suppression system to activate. 
Emergency operations were temporarily moved to police headquarters and the Mobile 
Operations Center vehicle while officials investigated and assessed the damage. 

Source: http://www.wsbtv.com/news/news/local-education/hazmat-situation-shuts- 
down-gwinnett-co-91 1/njgRS/ 

25. January 5, WCTI 12 New Bern - (North Carolina) Ambulance stolen from Vidant 
Medical returned, driver charged. Authorities recovered a stolen ambulance several 
hours after it was taken while parked at Vidant Medical Center in Greenville January 3 
and charged the driver. 

Source: http://www.wctil2.com/news/ambulance-stolen-from-vidant-medical-returned- 
hours-later/30532186 
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Information Technology Sector 

26. January 6, Securityweek - (International) Researchers find several UEFI 
vulnerabilities. The Computer Emergency Response Team Coordination Center 
(CERT/CC) released three advisories for vulnerabilities in the Unified Extensible 
Firmware Interface (UEFI) identified by researchers at Bromium and MITRE 
Corporation. Two vulnerabilities could be exploited by a local, authenticated attacker to 
bypass security functions and the third is a buffer overflow vulnerability. 

Source: http://www.securitvweek.com/researchers-find-several-uefi-vulnerabilities 

27. January 6, The Register - (International) HTTPS can be set as your super-cookie. A 
researcher demonstrated that the HTTP Strict Transport Security (HSTS) mechanism in 
HTTPS can be used by a malicious Web site to track which Web sites a user has visited 
due to HSTS creating a unique identifier to remember preferences for HTTPS sites. 
HSTS identifiers can be cleared in the Chrome, Firefox, and Opera browsers, are not 
used in Internet Explorer, but cannot be cleared in the Safari browser and syncs with 
the iCloud service as well. 

Source: 

http://www.theregister.co.uk/2015/01/06/https can be set as your supercookie/ 

28. January 6, Softpedia - (International) Custom greeting card seller Moonpig fixes 
security blunder 17 months after responsible disclosure. Greeting card seller 
Moonpig closed a vulnerability in its Android app that was first reported to the 
company in August 2013 and could have allowed an attacker to change the customer ID 
and access customer names, email addresses, dates of birth, addresses, order histories, 
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and the last four digits of payment card numbers. 

Source: http://news.softpedia.com/news/Custom-Greeting-Card-Seller-Moonpig-Fixes- 
Securitv-Blunder-17-Months-After-Responsible-Disclosure-469085.shtml 



Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

Nothing to report 
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Commercial Facilities Sector 

29. January 6, WSBT 22 South Bend - (Indiana) Officials release likely cause of Dunlap 
strip mall fire. A January 3 fire at Dunlap Plaza in Elkhart destroyed two units in the 
structure that housed the Iglesia De Jesucristo Palabra Miel church and the Community 
Action of Northeast Indiana non-profit group, while a salon and day spa also suffered 
some structural damage. Firefighters contained the blaze before it spread to other 
businesses and officials determined the fire was ignited by an electrical overload in the 
back of the building. 

Source: http://www.wsbt.com/news/local/multiple-departments-respond-to-elkhart- 
plaza-fire/305 12848 

30. January 6, Associated Press - (Vermont) Water heater explosion destroys part of 
Ludlow hotel. A two-story annex of a Best Western motel in Ludlow suffered 
$500,000 in losses and severe structural damage after an explosion in an oil-fired water 
heater January 6. 

Source: http://www.wcax.com/storv/27772760/water-heater-explosion-destroys-part- 
of-ludlow-hotel 

31. January 6, WAFB 9 Baton Rouge - (Louisiana) Apartment fire possibly caused by 
electrical problem displaces about 20 people. About 20 residents were displaced 
from the Black Stone Manor Apartments in Baton Rouge following a January 6 fire 
that is under investigation. No injuries were reported. 

Source: http://www.wafb.com/storv/27769598/apartment-fire-displaces-about-20- 
people 

32. January 6, WREX 13 Rockford - (Illinois) Fire spreads to 2nd building, crews 
continue to battle blaze in Rockford. Authorities ordered that the Asher Tool 
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warehouse in Rockford and an adjacent warehouse be torn down to avoid an accidental 
structural collapse after both structures were engulfed by fire January 6. Power to about 
350 ComEd customers was cut off and nearby businesses were forced to close while 
crews battled the blaze. 

Source: http://www.wrex.com/storv/27768819/2015/01/06/massive-warehouse-fire-in- 
rockford 



33. January 5, WANE 15 Fort Wayne - (Indiana) Dozens displaced after fire at Coliseum 
Inn. About 40 guests were displaced from the Coliseum Inn motel in Fort Wayne 
January 4 when a fire broke out in a downstairs room and spread throughout the 
structure. The cause of the fire is under investigation. 

Source: http://wane.com/2015/01/04/crews-respond-to-fire-at-coliseum-inn/ 
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Dams Sector 



Nothing to report 
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About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://www.dhs.gov/IPDailyReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support @ govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US -CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 



- 10 - 




